@alliasneo1
What about the voice-domain permission pushed down to the NAD?
Your dot1x tx-period is not excessively long, so I would not expect the endpoint to time out waiting for a DHCP request. I've a customer with also with mitel phones and tx-per...
@Sonflaa cisco recently released this guide to harden Remote Access VPN guides:- https://www.cisco.com/c/en/us/support/docs/security/secure-client/221880-implement-hardening-measures-for-secure.html#toc-hId-1707182889
@alliasneo1 when the switch is in closed mode, is the phone actually successfully authenticated and authorised in ISE?
Are you pushing down the voice domain permission as well? https://www.ciscopress.com/articles/article.asp?p=2091952&seqNum=4
@titusroz03 the message states WAITING_RESPONSE (from ISE). Is ISE configured correctly? Does ISE receive the request from the NAD? Is the RADIUS request from the correct IP that is configured in ISE for that NAD?
@titusroz03 have you configured cts authorization <methodlistname> list cts command?
aaa authorization network CTS group ISE_RADIUScts authorization list CTS
Here is a working example